Bruno Wolff III wrote:
The whole hierarchical design is a bad fit for what it is trying to do.
+1
Unfortunately, it's what makes the certificate cartels their huge amounts of $$$, so they'll keep lobbying browser developers into supporting their ¢a$h ¢ow. :-(
We really need a system which provides actual trust. The current one only proves that somebody paid enough mon€¥ to the cartels to get a certificate.
Kevin Kofler